FIREWALL: Deploying Cisco ASA Firewall Features

Prerequisites:

Course Description:

This five-day course aims to provide network security engineers with the knowledge and skills needed to implement and maintain Cisco ASA adaptive security appliance-based perimeter solutions.

Delegates will be able to reduce risk to the IT infrastructure and applications using Cisco ASA adaptive security appliance features, and provide detailed operations support for the Cisco ASA adaptive security appliance.

On completion of this course, delegates will be able to:

• Evaluate the basic technology, features, and hardware models of the Cisco ASA adaptive security appliance product line
• Implement and maintain basic Cisco ASA adaptive security appliance connectivity and device management plane features
• Implement and maintain data plane access control features of the Cisco ASA adaptive security appliance product family
• Implement and maintain Cisco ASA adaptive security appliance features that integrate itwith the local and global routing and switching infrastructure
• Implement and maintain Cisco ASA adaptive security appliance virtualization and highavailability features
• Evaluate Cisco ASA adaptive security appliance SSM modules, their major features, and integrate them with the Cisco ASA adaptive security appliance

This course includes the following modules:

Introduction tothe Cisco ASA Adaptive Security Appliance

• Introducing Cisco ASA Adaptive Security Appliance Technology and Features
• Introducing the Cisco ASA Adaptive Security Appliance Family

Implementation ofBasic Connectivity and Device Management

• Getting Started with the Cisco ASA Adaptive Security Appliance and Cisco ASDM
• Configuring Interfaces and Static Routing
• Configuring Basic Device Management Features
• Configuring Management Access

Deployment of Cisco ASA Adaptive Security Appliance Access Control Features

• Configuring Basic Access Control
• Using Cisco ASA Adaptive Security Appliance Modular Policy Framework
• Tuning Basic Stateful Inspection Features
• Configuring Application-Layer Policies
• Configuring Advanced Access Controls
• Configuring Resource Limits and Guarantees
• Configuring User-Based Policies (Cut-Through Proxy)

Deployment of Cisco ASA Adaptive Security Appliance Network Integration Features

• Deploying Network Address Translation
• Configuring Cisco ASA Adaptive Security Appliance Transparent Operations

Deployment of Cisco ASA Adaptive Security Appliance Virtualization and High Availability Features

• Deploying Cisco ASA Adaptive Security Appliance Virtualization Features
• Deploying Cisco ASA Adaptive Security Appliance Redundant Interfaces
• Deploying Active/Standby High Availability Failover
• Deploying Active/Active High Availability Failover

Integration of Cisco ASA Adaptive Security Appliance Security Service Modules

• Introducingthe Cisco ASA Adaptive Security Appliance Security Service Modules
• Integrating the Cisco ASA Adaptive Security Appliance AIP-SSM and AIP-SSC Modules
• Integrating the Cisco ASA Adaptive Security Appliance CSC-SSM Module

Labs

• Lab 2-1: Configuring Basic Connectivity
• Lab 2-2: Configuring Management Features
• Lab 3-1: Configuring Basic Access Control
• Lab 3-2: Tuning Basic Cisco ASA Adaptive Security Appliance Stateful Inspection Features
• Lab 3-3: Configuring Application-Layer Policies
• Lab 3-4: Configuring Advanced Access Controls
• Lab 3-5: Configuring User-Based Policies (Cut-Through Proxy)
• Lab 4-1: Configuring Cisco ASA Adaptive Security Appliance NAT
• Lab 4-2: Configuring Transparent Firewall Mode
• Lab 5-1: Deploying a Cisco ASA Adaptive Security Appliance Active/Standby Failover
• Lab 5-2: Deploying a Cisco ASA Adaptive Security Appliance Active/Active Failover

Appendixes

• Appendix A: Configuring Routing on the Cisco ASA Adaptive Security Appliance
• Appendix B: Lab (Optional): Configuring Dynamic Routing